Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation.

Vulnerabilities and CVEs 9 Oct 2026 1 min read

News · via Zscaler ThreatLabz

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

IntroductionIn July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat…

Threat Intelligence 8 Oct 2026 1 min read

News · via Security Affairs

Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure

Hunt.io traced BraZetsu ‘s infrastructure and found that hosting patterns and certificate data remained useful after published IOCs became outdated. Group-IB researchers published a detailed writeup…

Threat Intelligence 8 Oct 2026 1 min read

News · via CISA

Grid Protection Alliance openPDC and openHistorian

View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC

Vulnerabilities and CVEs 8 Oct 2026 1 min read

News · via Help Net Security

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor

ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at…

Threat Intelligence 8 Oct 2026 1 min read

News · via Cisco Talos

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. The vulnerabilities mentioned in this blog post have been patched…

Vulnerabilities and CVEs 7 Oct 2026 1 min read

News · via Chrome Releases

Early Stable Update for Desktop

The Stable channel has been updated to 156.0.8078.12/.13 for Windows and Mac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in…

Vulnerabilities and CVEs 7 Oct 2026 1 min read

News · via Microsoft Security

3 lessons from frontier AI vulnerability research

Shift 1. From frontier capability to scale Shift 2. From token consumption to reasoning economics Shift 3.

Vulnerabilities and CVEs 7 Oct 2026 1 min read

News · via BleepingComputer

Microsoft Outlook to block MSIX attachments starting November

Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month.

Threat Intelligence 7 Oct 2026 1 min read

News · via Chrome Releases

Chrome Beta for Desktop Update

The Beta channel has been updated to 156.0.8078.17 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release channels?

Vulnerabilities and CVEs 7 Oct 2026 1 min read

News · via Microsoft Security Response Center

CVE-2026-69436 Windows State Repository Service Elevation of Privilege Vulnerability

Updated CVE title. This is an informational change only.

Vulnerabilities and CVEs 7 Oct 2026 1 min read

News · via Canadian Centre for Cyber Security

Google security advisory (AV26-1006)

Serial number: AV26-1006 Date: October 7, 2026 As of October 6, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to…

Vulnerabilities and CVEs 7 Oct 2026 1 min read

News · via Hudson Rock

Infostealers Are Actively Hunting AI Agents and Developer Keys – Warden Infostealer

Infostealers Are Actively Hunting AI Agents and Developer Keys – Warden Infostealer Initial announcement and feature breakdown of Warden Stealer on the Exploit.in dark web forum. A highly…

Threat Intelligence 7 Oct 2026 1 min read